Skip to content
Michael Edie

Michael Edie

  • Home
  • About
  • Talks
  • Code
  • PGP
  • RSS
  • Home
  • About
  • Talks
  • Code
  • PGP
  • RSS

account manipulation

Honeypot Diaries: SSH Authorized Keys

April 30, 2023April 16, 2023 by tankmek

One of the many reasons I decided to deploy honeypots is to be able to observe attacker tactics, techniques, and procedures (TTPs). This blog post will share a frequently used tactic that attackers use to keep access once they have compromised one of my distributed honeypots. You may benefit from the rest of this content … Read more

Categories Honeypots Tags account manipulation, authorized_keys, blue team, cowrie, Linux, mitre, persistence, security, SIEM, splunk, ssh Leave a comment
© Sawbox Consulting, 2017-2023
 

Loading Comments...